Only check last entry for expected (system-executed) verification command

Previous entries contain commands executed by the user, so they obviously won't contain the system-executed verification command. That is not an issue.